feat: update ticket management and calendar functionality with improved data handling and local storage support

autoload/controls/class.Apanel.php

@@ -214,15 +214,20 @@ class Apanel
 
   static public function tickets_save()
   {
-    global $mdb;
+    global $mdb, $settings;
 
     if (empty($_POST['tickets']) || !is_array($_POST['tickets'])) {
       echo json_encode(['status' => 'error', 'message' => 'Brak danych']);
       exit;
     }
 
+    $allowedTicketIds = array_keys($settings['tickets']);
+
     foreach ($_POST['tickets'] as $ticketId => $data) {
-      $ticketId = preg_replace('/[^a-z0-9\-]/', '', $ticketId);
+      $ticketId = trim((string) $ticketId);
+      if (!in_array($ticketId, $allowedTicketIds, true)) {
+        continue;
+      }
 
       $price    = trim($data['price'] ?? '') !== '' ? (float) $data['price'] : null;
       $priceWkd = trim($data['price_weekend'] ?? '') !== '' ? (float) $data['price_weekend'] : null;